Welll yeah - point was that they installed a service without consent. And not just a browser feature, but something crossing a whole another boundary. AFAIK also, while the tunnel itself was not enabled, the service itself was turned on automatically.